Heroku's Security Slip-Up - Is It Time for a PaaS Security Certification Standard?
Today Heroku, a Ruby platform-as-a-service which was recently acquired by Salesforce.com, disclosed a serious security issue. The vulnerability has been fixed, and there is no evidence that it was ever exploited.
Earlier this week, NodeFu had its databases deleted when admins revealed its CouchOne password on Github. Missteps by PaaS providers…